Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File:                     DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier:          b3AFL3iWFeutev2aiIuAT1EEZYbl9bl3PvK3urTD0vM=
Subject key identifier:   4A:AA:4B:EE:5A:CB:FC:C4:B5:3F:F8:95:F8:5F:05:D5:35:0F:BC:8E
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       01982C6E8F918EA019AE4AEBB841C13BDA57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number:          15F4
Signing time:             Mon 21 Jul 2025 10:01:39 +0000
Manifest this update:     Mon 21 Jul 2025 10:01:39 +0000
Manifest next update:     Tue 22 Jul 2025 10:01:39 +0000
Files and hashes:         1: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: pc5a4WQpdEIj8lAvFtfM/TVPqcirIcCRlXghanGf6Bs=)
                          2: KX71aYDc7COcBvGYMtW_I8jVEro.roa (hash: m4mYzz0InD89bmwaO+N//OYVwFvsqF8sbCWbylUSfpU=)
                          3: VLH2ggfYLmRlUNQmOTDaXEZemRU.roa (hash: r81ADMKeWWOVhBZY/dzL8YFhvpB6T7KTTWyAmAeGrA4=)
                          4: Z31e2uZ4ZUo0ifh9SmP5d6rs9YA.roa (hash: 99LlYSdIOpp68PEiIS1MO6ONGzvLDbJLydlaJmSyBos=)
                          5: dpvfrInTYFYCDpSNy4nBJ7fMOBk.roa (hash: MFcK6MCir3IwgLRCLZLFYaFpQhejKg3ixDBCQgs5rTk=)
                          6: iY-7T8h9t9V2urHTmIgGwZIOHVQ.roa (hash: irtz9XTfXBHEHapv6cSGMQPMme8obAG5vt6M1vHm4qQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 10:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2c:6e:8f:91:8e:a0:19:ae:4a:eb:b8:41:c1:3b:da:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: Jul 21 10:01:39 2025 GMT
            Not After : Jul 22 10:01:39 2025 GMT
        Subject: CN=4aaa4bee5acbfcc4b53ff895f85f05d5350fbc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:c9:8c:b8:99:50:06:4d:2c:bc:c6:7d:12:
                    8e:0b:4e:b4:8c:97:d3:c0:1c:11:49:5e:59:8f:25:
                    1c:28:b6:e3:11:c1:3b:88:79:01:31:05:da:aa:cd:
                    32:90:e0:58:74:09:b0:84:05:ac:74:f7:da:8e:6c:
                    82:a2:4e:3f:ef:ad:14:dc:24:70:21:c9:ba:42:2a:
                    fc:d8:f5:9b:c4:7b:7a:da:be:35:52:6f:67:77:8f:
                    4a:21:d1:c2:20:7b:d8:94:43:ed:1a:72:e1:d9:3c:
                    dc:47:3a:c9:72:fb:36:7f:3b:12:af:33:8f:c3:91:
                    96:28:b5:dc:8a:63:dd:69:ce:39:c2:7c:7c:91:84:
                    ed:42:10:85:39:67:6c:06:b2:9c:8e:7b:f3:fb:7a:
                    8a:21:08:1a:93:69:82:44:8e:83:51:14:29:3a:ad:
                    35:a1:9b:64:0d:49:c3:bb:1f:9f:a8:3b:ec:d5:38:
                    7d:d5:00:fc:a8:d9:fb:90:c8:cc:89:dc:86:7c:06:
                    11:03:32:3b:66:5d:06:06:47:06:7c:61:19:78:f4:
                    7b:43:1e:39:3f:4b:ea:91:e0:c4:a3:eb:2f:5d:1b:
                    bc:5d:1a:b9:a3:fa:cf:33:65:2d:a1:dd:35:8e:f6:
                    6d:23:a3:50:aa:7e:bc:3c:0c:14:03:93:e6:67:ef:
                    33:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AA:4B:EE:5A:CB:FC:C4:B5:3F:F8:95:F8:5F:05:D5:35:0F:BC:8E
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:54:cd:72:32:2b:a1:3a:64:f2:de:4d:ef:a0:47:08:b8:ea:
         b7:40:66:5e:bd:e3:75:cc:e6:02:75:69:9c:cf:83:e3:02:35:
         48:2e:42:97:9b:52:2a:20:65:c2:e6:24:4f:83:cb:75:a3:16:
         65:a9:80:af:49:22:b9:ac:7c:6e:51:6a:af:f3:47:c7:bd:79:
         e1:2d:c9:24:f4:66:3d:06:0e:64:8d:59:e8:39:cb:43:e6:17:
         d4:a1:34:a0:05:07:f6:42:5b:2f:dd:a3:41:db:3c:03:7e:13:
         80:f7:59:a5:f3:00:74:bf:20:03:2a:4f:d4:7f:3a:43:2e:ee:
         c2:0f:cc:af:17:18:16:fd:8c:fb:cd:77:ca:77:84:7f:df:26:
         c8:d4:6e:cb:16:d2:a9:6a:15:79:99:79:f0:cf:83:ed:d3:11:
         13:f9:b2:dd:cb:e2:8e:ff:79:9e:16:2c:65:99:5a:d8:6c:7e:
         c3:e8:bc:d6:e5:82:de:44:22:3e:7c:f8:5f:79:16:f1:06:2a:
         cb:65:2e:c4:5e:ec:fb:4d:e7:69:ea:38:e9:6f:0a:da:14:b0:
         02:6f:f0:2c:68:cd:76:b9:85:ea:96:c6:83:55:ec:ed:18:d2:
         7b:87:3d:b4:98:98:23:12:9d:5f:14:b9:9b:82:eb:48:07:3c:
         8c:18:ca:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:04:59 2025 by rpki-client